remove legacy script-src directive
This commit is contained in:
parent
0d08f3606d
commit
262d110266
@ -52,7 +52,7 @@ public class PdfViewer extends AppCompatActivity implements LoaderManager.Loader
|
|||||||
"form-action 'none'; " +
|
"form-action 'none'; " +
|
||||||
"connect-src https://localhost/placeholder.pdf; " +
|
"connect-src https://localhost/placeholder.pdf; " +
|
||||||
"img-src blob: 'self'; " +
|
"img-src blob: 'self'; " +
|
||||||
"script-src 'self' 'resource://pdf.js'; " +
|
"script-src 'self'; " +
|
||||||
"style-src 'self'; " +
|
"style-src 'self'; " +
|
||||||
"frame-ancestors 'none'; " +
|
"frame-ancestors 'none'; " +
|
||||||
"base-uri 'none'";
|
"base-uri 'none'";
|
||||||
|
Loading…
x
Reference in New Issue
Block a user